On Sun, Jun 22, 2014 at 01:00:53PM -0600, Cox, Michael wrote: > I like the idea of recognizing environment variable syntax in config files, > at least a feature that would allow *some* config variables to be specified > as accepting environment variable syntax. It adds a lot of flexibility, > but I'm sure it might also introduce security issues that I am completely > unaware of (like the issue you made me aware of above).
I don't think there are any security issues; if you control the environment, you can already execute arbitrary code with git. Now we just need somebody to volunteer to implement it. :) -Peff -- To unsubscribe from this list: send the line "unsubscribe git" in the body of a message to majord...@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
